IBM Security Guardium V10.0 Administration (C2150-606) Free Practice Test

Question 1

A Guardium administrator installed an S-TAP but is not seeing any data in reports on the collector. The administrator discovered that an Inspection Engine is not configured for that S-TAP.
What is an Inspection Engine?

A. A piece of software residing on the Collectors.

B. The same thing as the policy and it runs on the S-TAP to inspect the traffic in real-time.

C. A set of parameters needed for the S-TAP to define how to monitor traffic for a particular database instance on a server.

D. Another software to be installed on the Database server.

Correct Answer: B

Question 2

A Guardium administrator manages an environment containing four standalone Collectors. The administrator has been asked to provide a weekly report showing all Data Manipulation Language (DML) SQL statements performed by all database administrators on all databases. The administrator does not want to run the report on each Collector.
What should the administrator do to simplify this task and run the report in only one place every week?

A. Replace the 4 Collectors with one Aggregator.

B. install a Configuration Auditing System (CAS) on each Database Server. Configure the CAS Client to send data to a Collector. Create and run the report on the Collector.

C. Create an Enterprise Report on one Collector combining the data.

D. Add a Guardium Aggregator to the environment. Create and run the report on the Aggregator.

Correct Answer: D

Question 3

An administrator manages a Guardium environment including 4 Collectors exporting data to an Aggregator. The Collectors export their data daily at 2, 3, 4 and 5 am Eastern Standard Time (EST) respectively. The Collectors receive traffic every day. The logs on all the Collectors confirm data is exported daily without errors, and all the exported files always have data. A Session report is run on the Aggregator at noon EST for data from the last day.
Which of the following will ensure there is data in the report?

A. Schedule Data Import in the Aggregator to run every day before 2 am EST.

B. Schedule Data Import on the Aggregator to run every day at 6 am EST or later.

C. Schedule Data Purge on the Aggregator to run every day after 5 am EST.

D. Schedule Data Import on the Aggregator to run at any time of the day.

Correct Answer: A

Question 4

The last Vulnerability Assessment tests performed in a company were run one year ago. The company wants to ensure the Vulnerability Assessment tests keep up with the latest database common vulnerabilities. The company wants to use the Guardium default tests instead of customer designed tests.
What should the Guardium administrator do to update the tests that will be run?

A. Install the latest released Database Activity Monitor Content.

B. install the latest patch on the Guardium appliance.

C. Ask the Company Security Provider to supply the default tests

D. Ask the database administrators to provide the default tests.

Correct Answer: A

Question 5

An administrator just installed the Guardium product using the Guardium ISO image. Which step must the administrator perform as part of the initial set-up of the new appliance?

A. Generate the GUI certificate request.

B. Configure network settings on the appliance.

C. Restart the sniffer process from the CLI command prompt.

D. Obtain the passwords for the databases to be monitored by the appliance.

Correct Answer: B

Question 6

A Guardium administrator needs to use CLI commands to maintain the internal database, clean static orphans, produce static system reports and to monitor live network traffic filtered by IP addresses and port numbers.
Which combination of commands should the administrator use for these tasks?

A. jptrafandsupport must_gather

B. support must_gatherandshow network verify

C. diagandiptraf

D. diag and trace_route

Correct Answer: A

Welcome to TestSimulate

IBM Security Guardium V10.0 Administration (C2150-606) Free Practice Test